CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2007-1005

CA eTrust Intrusion Detection (eID) is affected by CVE-2007-1005. A heap-based buffer/overrun occurs in SW3eng.exe within the eID Engine service when handling session keys for remote administration on port 9191/tcp, allowing a remote unauthenticated attacker to cause a denial of service (applicat...

CVE-2007-1005: Undefined Security Weakness

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2006-6369: Undefined Security Weakness

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

CVE-2006-5525: Undefined Security Weakness

Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via 1 "//UNION " or 2 " UNION//" sequences, which are not rejected by the protection mechanism, as demonstrated by a SQL injection via the eid parameter in a...

CVE-2004-2293: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 eid parameter or 2 query parameter to the Encyclopedia module, 3 previewreview function in the Reviews module as demonstrated by the url, cover,...

CVE-2005-1946: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to an editentry, replyentry, or editcomment action, or 2 the mid parameter to an aboutme action...

CVE-2004-1913: Undefined Security Weakness

Cross-site scripting XSS vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter...

CVE-2004-1914: Undefined Security Weakness

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter...

CVE-2005-0217

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...

CVE-2004-1530: Undefined Security Weakness

SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the 1 eid or 2 cid parameters...

CVE-2005-0217

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...

CVE-2005-0217: Undefined Security Weakness

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...